Network monitoring system, network monitoring method, and computer-readable storage medium

1. A network monitoring system for monitoring a virtual network function, comprising: a prediction unit configured to acquire information needed for detecting an abnormality in a virtual network function provided in a virtualization infrastructure, and predict performance information of a virtual network function that is to be newly provided and monitored; a generation unit configured to generate an abnormality determination rule that is to serve as a reference for determining whether or not actual performance information of a virtual network function falls within an allowed range that is set based on the predicted performance information; a determination unit configured to perform abnormality determination using the actual performance information of the virtual network function and the abnormality determination rule; and an output unit configured to output an abnormality notification if it is determined by the determination unit that there is an abnormality.

2. The network monitoring system according to claim 1 , further comprising an accumulation unit configured to accumulate actual performance information of a newly-acquired virtual network function in a performance information cache as performance information during normal operation.

3. The network monitoring system according to claim 2 , further comprising an updating unit configured to update the generated abnormality determination rule using the accumulated performance information.

4. The network monitoring system according to claim 1 , wherein the information needed for determining an abnormality in the virtual network function includes at least a virtual network function type of a virtual network function, and an allocated resource amount for the virtual network function.

5. A network monitoring system in which at least one abnormality detection agent and an abnormality detection control apparatus monitor a virtual network function, wherein the abnormality detection control apparatus includes: a performance information database configured to accumulate performance information during normal operation for each virtual network function; a calculation unit configured to acquire information needed for detecting an abnormality in a virtual network function, and predict performance information of a virtual network function that is to be newly provided and monitored; and a control unit configured to generate, reconfigure, or delete an abnormality detection agent on any virtualization infrastructure on a network, and the abnormality detection agent includes: a collection unit configured to collect actual performance information on a virtual network function being monitored and on a virtualization infrastructure; an abnormality determination rule designing unit configured to generate an abnormality determination rule that is to serve as a reference for determining whether or not actual performance information of a virtual network function on a virtualization infrastructure falls within an allowed range that is set based on the predicted performance information; an analyzing unit configured to perform abnormality determination using the collected actual performance information and the generated abnormality determination rule; and a notification unit configured to output an abnormality notification if the result of the determination is that there is an abnormality.

6. The network monitoring system according to claim 5 , wherein the abnormality detection agent further includes a performance information cache configured to accumulate the collected actual performance information.

7. The network monitoring system according to claim 6 , wherein the abnormality detection agent further includes a transmission unit configured to transmit the actual performance information accumulated in the performance information cache to the performance information database in response to a request from the abnormality detection control apparatus.

8. The network monitoring system according to claim 5 , wherein the abnormality determination rule designing unit includes an updating unit configured to update the abnormality determination rule using the collected actual performance information.

9. The network monitoring system according to claim 5 , wherein the information needed for determining an abnormality in the virtual network function includes at least a virtual network function type of a virtual network function, and an allocated resource amount for the virtual network function.

10. A network monitoring method for monitoring a virtual network function, wherein an abnormality detection control apparatus performs: accumulating performance information during normal operation of a virtual network function provided on a virtualization infrastructure; acquiring information needed for detecting an abnormality in a virtual network function and predicting performance information of a virtual network function that is to be newly provided and monitored; and generating an abnormality detection agent on a virtualization infrastructure in which the virtual network function to be monitored exists, and the abnormality detection agent performs: collecting actual performance information on a virtual network function being monitored and a virtualization infrastructure; generating an abnormality determination rule that is to serve as a reference for determining whether or not actual performance information of a virtual network function on a virtualization infrastructure falls within an allowed range that is set based on the predicted performance information; performing abnormality determination using the collected actual performance information and the generated abnormality determination rule; and outputting an abnormality notification if the result of the determination is that there is an abnormality.

11. A non-transitory computer-readable storage medium including a computer program for a network monitoring system in which a virtual network function is monitored by an abnormality detection control apparatus configured to perform control for accumulating performance information during normal operation of at least one abnormality detection agent and for network functions in a performance information database, acquiring information needed for detecting an abnormality in a virtual network function, predicting performance information of a virtual network function that is to be newly provided and monitored, and generating, reconfiguring, or deleting an abnormality detection agent on any virtualization infrastructure on a network, the program being for causing a computer to execute: collecting actual performance information on a virtual network function being monitored and on a virtualization infrastructure; generating an abnormality determination rule that is to serve as a reference for determining whether or not actual performance information of a virtual network function on a virtualization infrastructure falls within an allowed range that is set based on the predicted performance information; performing abnormality determination using the collected actual performance information and the generated abnormality determination rule; and outputting an abnormality notification if the result of the determination is that there is an abnormality.

12. A non-transitory computer-readable storage medium including a computer program for a network monitoring system in which a virtual network function is monitored by an abnormality detection control apparatus and at least one abnormality detection agent configured to collect actual performance information on a virtual network function that is to be monitored and on a virtualization infrastructure, generate an abnormality determination rule that is to serve as a reference for determining whether or not the actual performance information of each virtual network function on the virtualization infrastructure falls within an allowed range that is set based on the predicted performance information, perform abnormality determination using the collected actual information and the generated abnormality determination rule, and output an abnormality notification if the result of the determination is that there is an abnormality, the program being for causing a computer to execute: accumulating performance information during normal operation for each virtual network function; acquiring information needed for detecting an abnormality in a virtual network function and predicting performance information of a virtual network function that is to be newly provided and monitored; and performing control for generating, reconfiguring, or deleting an abnormality detection agent on any virtualization infrastructure on a network.